REMARKS 

Claims 11, 13, 14, 16-19, and 22-28 are pending. The Examiner's reconsideration of the 
rejection in view of the remarks is respectfully requested. 

Claims 11,14, 16, 18, and 22-26 have been rejected under 35 U.S.C. 103(a) as being 
unpatentable over Sudia et al. (USPAN 2001/0050990) in view of Abbondanzio (US 
2003/0188176). 

Claims 1 1, 22, and 23 are the independent claims. 

Claims 1 1 and 22 claim, inter alia, executing "said signed authorized boot code having a 
verified digital signature by branching to a copy of said signed authorized boot code in said 
protected memory, said signed authorized boot code including instructions for performing a boot 
process for a computer device comprising the processor." Claim 23 claims, inter alia, "a 
processor comprising includes inline cryptography and integrity hardware for executing boot 
code in signal communication with said protected memory executing said signed authorized code 
from the protected memory for booting the computing device after verifying that a digital 
signature contained in said signed authorized code is original in accordance with a first public 
key stored in said protected memory." Claims 1 1, 22 and 23 specify that the signed authorized 
code is executed by the processor and that the code embodies a boot process (see for example, 
paragraphs [0022-0024] of the published application). 

The Examiner's Response to Arguments is appreciated. The Examiner suggests that the 
combination of Sudia and Abbondanzio is proper because Abbondanzio teaches "If the received 
boot code image is authenticated, then server blade 110 may boot the received boot code image 
in step 609." Respectfully, at the point of step 609 in FIG. 6, the server blade has already been 
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booted from the network. That is, the intended purpose of Abbondanzio is to provide a method to 
perform the execution of boot code off of the system to be booted. 

More particularly, the combination of Sudia and Abbondanzio is believed to be improper 
(if a proposed modification would render the prior art being modified unsatisfactory for its 
intended purpose, then there is no suggestion or motivation to make the proposed modification). 
Respectfully, the proposed combination requires that the processor of a server to be booted 
executes boot code. 

The proposed combination is counter to the express teachings of Abbondanzio , wherein 
the server blade boots from either deployment server 130 or customer boot server 206 (see FIG. 
2 and paragraph [0058]). That is, it is the express intended purpose of Abbondanzio to perform 
the execution of boot code from a network location. Consider paragraph [0058], which teaches: 
In step 606, the one or more server blades 1 10 determined to boot from 
either deployment server 130 or customer boot server 206 may boot from the 
appropriate device, e.g., deployment server 130, customer boot server 206. In one 
embodiment, the one or more server blades 1 10 determined to boot from either 
deployment server 130 or customer boot server 206 may boot from the 
appropriate device over a public network, e.g., campus LAN 205 (FIG. 2). 
In view of the foregoing, the server blade of Abbondanzio is first booted from the network. 
Subsequently, the booted server blade may boot a boot code image, however the server blade is 
already booted. Therefore, the proposed combination renders the Abbondanzio reference 
unsatisfactory for an intended purpose because it requires that a server blade boot from a local 
directory. 

Assuming, arguendo, that one could combine the references, the combination fails to 
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teach or suggest all of the claimed limitations. 

Referring to Claims 1 1 and 22, Sudia teaches a cryptographic system with a key escrow 
feature (see Abstract). Sudia teaches how to perform a desired upgrade instruction in a tamper- 
resistance trusted device (see paragraph [0250]). The upgrade process presumes that the trusted 
device is booted. Sudia does not consider how to perform the upgrade process, much less execute 
the upgrade firmware, at boot time. For example, Sudia fails to teach that a processor includes 
inline cryptography and integrity hardware for executing boot code, essentially as claimed in 
Claim 23. Consider that Sudia teaches that the "basic cryptographic library routines" are stored 
in firmware (see paragraphs [0097-0099]). Sudia makes use of cryptography software or code 
without the ability to perform such operations prior to booting the trusted device. 

Abbondanzio teaches methods for remotely booting devices by remotely configuring 
authentication parameters instead of manually installing them on the devices to be booted (see 
Abstract). According to Abbondanzio , the server blades are first booted (for example, see block 
606, FIG. 6) then subsequently, the server blade may attempt to boot a boot code image (for 
example, see block 609, FIG. 6). In view of the foregoing, the "booting" of the server blade 
occurs before the boot code image may be implemented. Therefore, similar to Sudia , 
Abbondanzio presumes that the device is booted before the boot code image may be 
implemented. For example, consider the case where the boot code image is not authenticated; in 
this case, the server blade is already booted and may perform an operation to "discard the 
received boot code image" (see paragraph [0060]). 

The proposed combination of Sudia and Abbondanzio is characterized by the Examiner 
as enabling the use of "Sudia system of installing new or additional firmware code with 
Abbondanzio method of transmitting a signed boot code as a more secure way to transmit boot 
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code" (see page 4, Office Action). 

Respsectfully, the combination of Sudia and Abbondanzio fails to teach or suggest how 
to execute signed authorized code that embodies a boot process of a device. Note that Claims 1 1 
and 22 recite, "executing further comprises performing inline decryption of the copy of said 
signed authorized boot code in said protected memory . " That is, the combination of Sudia and 
Abbondanzio fails to teach or suggest methods for performing a cryptographic process prior to 
booting a device, by the device. That is, according to the claimed limitations of Claims 1 1 and 
22, "said signed authorized boot code including instructions for performing a boot process for a 
computer device comprising the processor." 

More particularly, Abbondanzio teaches a method for booting to a network, and only 
subsequently implementing a boot code image. The process of booting the server blade is 
performed from the network. Therefore, the combination of Sudia and Abbondanzio fails to 
teach or suggest all of the limitations of Claims 1 1 and 22. 

Claims 13, 14, 16-19 depend from Claim 11. The dependent claims are believed to be 
allowable for at least the reasons given for Claim 11. The Examiner's reconsideration of the 
rejection is respectfully requested. 

Claims 17, 19, 27 and 28 have been rejected under 35 U.S.C. 103(a) as being 
unpatentable over Sudia in view of Morgan et al. (USPN 6,185,685). The Examiner stated 
essentially that the combined teachings of Sudia and Morgan teach or suggest all of the 
limitations of Claims 17, 19, 27 and 28. 
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Claims 17 and 19 depend from Claim 11. Claims 27 and 28 depend from Claim 23. The 
dependent claims are believed to be allowable for at least the reasons given for the respective 
independent claims. Reconsideration of the rejection is respectfully requested. 



For the forgoing reasons, the application, including Claims 11, 13, 14, 16-19, and 22-28, 
is believed to be in condition for allowance. Early and favorable reconsideration of the case is 
respectfully requested. 

Respectfully submitted, 



Dated: October 31, 2011 By: /Nathaniel T. Wallace/ 
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